Internet Archive's in-browser video "theater" requires JavaScript to be enabled. It appears your browser does not have it turned on. Please see your browser settings for this feature.

play8?>>

OHM2013: Ruud Schramp - Ram Memory Acquisition Using Live Bios Modification

Publication date: 2013-08-02

Topics: OHM2013, talk, Ruud Schramp, BIOS, RAM, RAM Acquisition, hacking, security, ECC

Language: English

Item Size: 2.5G

BIOS swap on server PC. Memory acquisition using firewire, reboot or userspace tools is standard. What if your intel motherboard BIOS wipes ECC memory and live plugging PCIe fails?

The presentation describes an alternative way to initialise RAM using methods from the coreboot project. After initialisation the RAM can be dumped compressed over serial and a LPC-USB device.

Event program page: https://program.ohm2013.org/event/157.html